CIMC Session Management
You can view and close any KVM, vMedia, and SOL sessions in Cisco UCS Manager. If you have administrator privileges, you can discontinue the KVM, vMedia, and SoL sessions of any user. . Cisco Integrated Management Controller (CIMC) provides session information to Cisco UCS Manager. When Cisco UCS Manager gets an event from CIMC, it updates its session table and displays the information to all users.
-
Name—The name of the user who launched the session.
-
Session ID—The ID associated with the session. The format of the session ID for blades is [unique identifier] _ [chassis id] _ [Blade id]. The format of the session ID for racks is [unique identifier] _ 0 _ [Rack id].
-
Type of session—KVM, vMedia, or SoL.
-
Privilege level of the user—Read-Write, Read Only, or Granted.
-
Administrative state—Active or Inactive. The value is active if the session is active. The value is inactive if the session terminate command has been issued but the session has not been terminated. This situation occurs when FSM of the server is in progress with another operation or when the connectivity to CIMC is lost.
-
Source Address—The IP address of the computer from which the session was opened.
-
Service Profile—The service profile associated with the session. The service profile attribute value for a CIMC session is displayed only if the session is opened on an IP address that is provided from the service profile.
-
Server—The name of the server associated with the session.
-
Login time—The date and time the session started.
-
Last Update Time—The last time the session information was updated by CIMC.
A new session is generally added when a user connects to KVM, vMedia, or SOL. A Pnuos vMedia session will be displayed in the session table during the server discovery with the user name __vmediausr__.
The CIMC session data is available under the CIMC Sessions tab in Cisco UCS Manager GUI. Any CIMC session terminated by the user is audit logged with proper details.
Note |
To perform the GUI and CLI tasks that are described in this guide, a CIMC image version of 2.1(2a) or above is required for the session management support for the blade servers. The latest CIMC image version of 1.5(1l) and above is required for the rack-servers. |
Viewing the CIMC Sessions Opened by the Local Users
Note |
Viewing CIMC sessions of a specific server or a service-profile option is not present in CLI. It is available in GUI. |
Procedure
Command or Action | Purpose | |
---|---|---|
Step 1 |
UCS-A # scope security |
Enters security configuration mode. |
Step 2 |
UCS-A /security # show cimc-sessions local |
Displays all CIMC sessions opened by the local users. |
Step 3 |
UCS-A /security # show cimc-sessions local user-name |
Displays all CIMC sessions opened by a specific local user. |
Example
The following examples show how to view:
-
All CIMC sessions opened by local users
-
CIMC session opened by a specific local user
-
Details of the CIMC session opened by a specific local user.
All sessions opened by local users:
UCS-A # scope security
UCS-A /security # show cimc-sessions local
Session ID Type User Source Addr Admin State
---------- ------ --------- --------------- ------------
42_1_1 Kvm admin 10.106.22.117 Active
4_1_5 Kvm admin 10.106.22.117 Active
5_1_5 Vmedia admin 10.106.22.117 Active
Session opened by a specific local user:
UCS-A /security # show cimc-sessions local admin
Session ID Type User Source Addr Admin State
---------- ------ --------- --------------- ------------
42_1_1 Kvm admin 10.106.22.117 Active
Details of session opened by a specific local user:
UCS-A /security # show cimc-sessions local admin detail
Session ID 42_1_1
Type: Kvm
User: admin
Source Addr: 10.106.22.117
Login Time: 2013-06-28T06:09:53.000
Last Updated Time: 2013-06-28T06:21:52.000
Admin State: Active
Priv: RW
Server: sys/chassis-1/blade-1
Service Profile:
Viewing the CIMC Sessions Opened by the Remote Users
Follow this task to view all the CIMC sessions opened by the remote users or the CIMC sessions opened by a specific remote user.
Procedure
Command or Action | Purpose | |
---|---|---|
Step 1 |
UCS-A # scope security |
Enters security configuration mode. |
Step 2 |
UCS-A /security # show cimc-sessions remote |
Displays all CIMC sessions opened by the remote users. |
Step 3 |
UCS-A /security # show cimc-sessions remote user-name |
Displays all CIMC sessions opened by a specific remote user. |
Example
The following examples show how to view:
-
All CIMC sessions opened by remote users
-
CIMC session opened by a specific remote user
-
Details of the CIMC session opened by a specific remote user.
All sessions opened by remote users:
UCS-A # scope security
UCS-A /security # show cimc-sessions remote
Session ID Type User Source Addr Admin State
---------- ------ --------- --------------- ------------
43_1_1 Kvm administrator 10.106.22.117 Active
6_1_5 Kvm test-remote 10.106.22.117 Active
7_1_5 Vmedia test-remote 10.106.22.117 Active
Session opened by a specific remote user:
UCS-A /security # show cimc-sessions remote administrator
Session ID Type User Source Addr Admin State
---------- ------ --------- --------------- ------------
43_1_1 Kvm administrator 10.106.22.117 Active
Details of session opened by a specific remote user:
UCS-A /security # show cimc-sessions remote administrator detail
Session ID 43_1_1
Type: Kvm
User: administrator
Source Addr: 10.106.22.117
Login Time: 2013-06-28T06:09:53.000
Last Updated Time: 2013-06-28T06:21:52.000
Admin State: Active
Priv: RW
Server: sys/chassis-1/blade-1
Service Profile:
Viewing the CIMC Sessions Opened by an IPMI User
To view the CIMC sessions opened by an IPMI user, complete the following steps:
Procedure
Command or Action | Purpose | |
---|---|---|
Step 1 |
UCS-A # scope org org-name |
Enters the root organization mode. |
Step 2 |
UCS-A /org # scope ipmi-access-profile profile-name |
Enters the IPMI access profile name. |
Step 3 |
UCS-A /org/ipmi-access-profile # scope ipmi-user user-name |
Enters an IPMI user name. |
Step 4 |
UCS-A /org/ipmi-access-profile/ipmi-user # show cimc-sessions |
Displays all CIMC sessions opened by the specified IPMI User. |
Example
The following example shows how to view all the CIMC sessions opened by an IPMI user:
UCS-A # scope org Finance
UCS-A /org* # scope ipmi-access-profile ReadOnly
UCS-A /org/ipmi-access-profile* # scope ipmi-user alice
UCS-A /org/ipmi-access-profile/ipmi-user # show cimc-sessions
Session ID Type User Source Addr Admin State
---------- ------ --------- --------------- --------------
45_1_1 sol alice 10.106.22.117 Active
Clearing the CIMC Sessions of a Server
This task shows how to clear all CIMC sessions opened on a server. You can also clear the CIMC sessions on a server based on the session type and the user name.
Procedure
Command or Action | Purpose | |
---|---|---|
Step 1 |
UCS-A # scope security |
Enters security configuration mode. |
Step 2 |
UCS-A /security # terminate cimc-sessions server chassis-id/blade-id |
Clears the CIMC sessions on a specific blade server of a chassis. |
Step 3 |
UCS-A /security # terminate cimc-sessions server Rack-server-id |
Clears the CIMC sessions on a specific rack server. |
Step 4 |
UCS-A /security # terminate cimc-sessions server server-id type session-type |
Clears the CIMC sessions of a specific type on a server. |
Step 5 |
UCS-A /security # terminate cimc-sessions server server-id user-name user-name |
Clears the CIMC sessions of a specific user on a server. |
Example
The first example shows how to clear all CIMC sessions on a server. The second example shows how to clear the CIMC sessions of a specific type on a server. The third example shows how to clear the CIMC sessions of a specific user on a server:
UCS-A /security # scope security
UCS-A /security # terminate cimc-sessions server 2/1
This will close KVM sessions. Are you sure? (yes/no):yes
UCS-A /security
UCS-A # scope security
UCS-A /security # terminate cimc-sessions server 2/1 type kvm
This will close KVM sessions. Are you sure? (yes/no):yes
UCS-A # scope security
UCS-A /security # terminate cimc-sessions server 2/1 user-name test-user
This will close KVM sessions. Are you sure? (yes/no):yes
Clearing the CIMC Sessions of a Modular Server
This task shows how to clear all CIMC sessions opened on a server. You can also clear the CIMC sessions on a server based on the session type and the user name.
Procedure
Command or Action | Purpose | |
---|---|---|
Step 1 |
UCS-A # scope security |
Enters security configuration mode. |
Step 2 |
UCS-A /security # terminate cimc-sessions server chassis-id / cartridge-id / server-id |
Clears the CIMC sessions on a specific modular server of a cartridge on a chassis. |
Step 3 |
UCS-A /security # terminate cimc-sessions server chassis-id / cartridge-id / server-id type session-type |
Clears the CIMC sessions of a specific type on a server. |
Step 4 |
UCS-A /security # terminate cimc-sessions server chassis-id / cartridge-id / server-id user-name user-name |
Clears the CIMC sessions of a specific user on a server. |
Example
The first example shows how to clear all CIMC sessions on a server. The second example shows how to clear the CIMC sessions of a specific type on a server. The third example shows how to clear the CIMC sessions of a specific user on a server:
UCS-A /security # scope security
UCS-A /security # terminate cimc-sessions server 1/2/1
This will close cimc sessions. Are you sure? (yes/no):yes
UCS-A /security
UCS-A # scope security
UCS-A /security # terminate cimc-sessions server 1/2/1 type kvm
This will close KVM sessions. Are you sure? (yes/no):yes
UCS-A # scope security
UCS-A /security # terminate cimc-sessions server 1/2/1 user-name test-user
This will close cimc sessions. Are you sure? (yes/no):yes
Clearing All CIMC Sessions Opened by a Local User
This task shows how to clear the sessions opened by a local user.
Procedure
Command or Action | Purpose | |
---|---|---|
Step 1 |
UCS-A # scope security |
Enters security configuration mode. |
Step 2 |
UCS-A /security # terminate cimc-sessions local-user user-name |
Clears all CIMC sessions opened by a local user. |
Step 3 |
UCS-A /security # terminate cimc-sessions local-user user-name type {kvm | vmedia sol | all } |
Clears all CIMC sessions of specific session type opened by a local user. |
Example
The following example shows how to clear the CIMC sessions opened by a local user:
UCS-A /security# scope security
UCS-A /security# terminate cimc-sessions local-user testuser
This will close cimc sessions. Are you sure? (yes/no):yes
UCS-A /security#
Clearing All CIMC Sessions Opened by a Remote User
This task shows how to clear CIMC sessions opened by a remote user.
Procedure
Command or Action | Purpose | |
---|---|---|
Step 1 |
UCS-A # scope security |
Enters security configuration mode. |
Step 2 |
UCS-A /security # terminate cimc-sessions remote-user user-name |
Clears all CIMC sessions opened by a remote user. |
Step 3 |
UCS-A /security # terminate cimc-sessions remote-user user-name type {kvm | vmedia sol | all } |
Clears all CIMC sessions of specific session type opened by a remote user. |
Example
The following example shows how to clear all CIMC sessions opened by a remote user:
UCS-A /security# scope security
UCS-A /security# terminate cimc-sessions remote-user testuser
This will close cimc sessions. Are you sure? (yes/no):yes
UCS-A /security#
Clearing a Specific CIMC Session Opened by a Local User
This task shows how to clear a specific CIMC session opened by a local user.
Procedure
Command or Action | Purpose | |
---|---|---|
Step 1 |
UCS-A # scope security |
Enters security configuration mode. |
Step 2 |
UCS-A /security # scope local-user user-name |
Enters local user mode. |
Step 3 |
UCS-A /security/local user # terminate cimc-session session-id |
Clears the chosen CIMC session. |
Step 4 |
UCS-A /security/local user* # commit-buffer |
Commits the transaction. |
Example
The following example shows how to clear a specific CIMC session opened by a local user and commits the transaction:
UCS-A /security# scope security
UCS-A /security# scope local-user admin
UCS-A /security/local user # terminate cimc-session 6_1_2
UCS-A /security/local user*# commit-buffer
UCS-A /security/local user#
Clearing a Specific CIMC Session Opened by a Remote User
This task shows how to clear a specific CIMC session opened by a remote user.
Procedure
Command or Action | Purpose | |
---|---|---|
Step 1 |
UCS-A # scope security |
Enters security configuration mode. |
Step 2 |
UCS-A /security # scope remote -user user-name |
Enters remote user mode. |
Step 3 |
UCS-A /security/remote user # terminate cimc-session session-id |
Clears the chosen CIMC session. |
Step 4 |
UCS-A /security/remote user* # commit-buffer |
Commits the transaction. |
Example
The following example shows how to clear a specific CIMC session opened by a remote user and commits the transaction:
UCS-A /security# scope security
UCS-A /security# scope remote-user admin
UCS-A /security/remote user # terminate cimc-session 6_1_3
UCS-A /security/remote user*# commit-buffer
UCS-A /security/remote user#
Clearing a CIMC Session Opened by an IPMI User
To clear a CIMC session opened by an IPMI user, complete the following steps:
Procedure
Command or Action | Purpose | |
---|---|---|
Step 1 |
UCS-A # scope org org-name |
Enters the root organization mode. |
Step 2 |
UCS-A /org # scope ipmi-access-profile profile-name |
Enters the IPMI access profile name. |
Step 3 |
UCS-A /org/ipmi-access-profile # scope ipmi-user user-name |
Enters the IPMI user. |
Step 4 |
UCS-A /org/ipmi-access-profile/ipmi-user # terminate cimc-sessions session-id |
Terminates a specific CIMC session opened by an IPMI user. |
Step 5 |
UCS-A /org/ipmi-access-profile/ipmi-user * commit-buffer |
Commits the changes. |
Example
The following example displays how to clear a specific CIMC session opened by an IPMI user and commits the changes:
UCS-A # scope org Finance
UCS-A /org* # scope ipmi-access-profile ReadOnly
UCS-A /org/ipmi-access-profile* # scope ipmi-user alice
UCS-A /org/ipmi-access-profile/ipmi-user # terminate cimc-sessions 5_1_2
UCS-A /org/ipmi-access-profile/ipmi-user* # commit-buffer